Not yet scoredPublished Oct 6, 2026

CVE-2026-98326wifi: mac80211: mesh: release the channel if start fails

Updated under an hour ago (Oct 26, 2026, 5:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211_join_mesh() acquires a channel context and then calls ieee80211_start_mesh(), which can fail. In that case, the chanctx isn't released then interface removal will attempt to unassign it after it's removed from the driver, hitting: wlan0: Failed check-sdata-in-driver check, flags: 0x0 WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx ieee80211_assign_link_chanctx __ieee80211_link_release_channel ieee80211_link_release_channel ieee80211_teardown_sdata unregister_netdevice_many_notify _cfg80211_unregister_wdev ieee80211_remove_interfaces ieee80211_unregister_hw mac80211_hwsim_del_radio hwsim_exit_net Correctly release the channel on start failures.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 2b5e19677592c167d012c2d129407f39d2bdeb8d before f0afcec2129c166e61821d6ae097061155f01b12; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before b51f5a310bd6888b90bb9546a8081215dcfe6fbe; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before 632f7acfe6dac1278a9314eaaab14fada400ddaf; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before 41bee71112db53651ba9a9030de1b843255a4a7f; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before 4a4e3fa77ea36d3419d806fb5883ef425a605a5d; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before ae97fff6495a8764bc0ef281cfe5444f701e527f	CNA record

References

References

https://git.kernel.org/stable/c/f0afcec2129c166e61821d6ae097061155f01b12
https://git.kernel.org/stable/c/b51f5a310bd6888b90bb9546a8081215dcfe6fbe
https://git.kernel.org/stable/c/632f7acfe6dac1278a9314eaaab14fada400ddaf
https://git.kernel.org/stable/c/41bee71112db53651ba9a9030de1b843255a4a7f
https://git.kernel.org/stable/c/4a4e3fa77ea36d3419d806fb5883ef425a605a5d
https://git.kernel.org/stable/c/ae97fff6495a8764bc0ef281cfe5444f701e527f

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.